1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
ebtables -t filter --atomic-file /tmp/ferm.0 --atomic-save
ebtables -t nat --atomic-file /tmp/ferm.0 --atomic-save
ebtables -t broute --atomic-file /tmp/ferm.0 --atomic-save
ebtables -t filter --atomic-file /tmp/ferm.1 --atomic-init
ebtables -t filter --atomic-file /tmp/ferm.1 --init-table
ebtables -t nat --atomic-file /tmp/ferm.1 --atomic-init
ebtables -t nat --atomic-file /tmp/ferm.1 --init-table
ebtables -t broute --atomic-file /tmp/ferm.1 --atomic-init
ebtables -t broute --atomic-file /tmp/ferm.1 --init-table
ebtables -t filter --atomic-file /tmp/ferm.1 -P INPUT ACCEPT
ebtables -t filter --atomic-file /tmp/ferm.1 -F
ebtables -t filter --atomic-file /tmp/ferm.1 -X
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --source 00:11:22:33:44:55 -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --among-src 00:11:22:33:44:55,00:11:22:33:44:66 -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol IPv4 --ip-source 192.168.1.1 -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol IPv4 --ip-protocol tcp --ip-destination-port 22 -j ACCEPT
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol IPv6 --ip6-source 2001:db8:ffff:ffff:211:22ff:fe33:4455 -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol ARP --arp-mac-src 00:11:22:33:44:55 -j ACCEPT
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol ARP --arp-gratuitous -j ACCEPT
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --protocol 0x8137 -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --limit 30/hour -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --in-interface eth0 --logical-in br0 --out-interface eth1 --logical-out br1 -j ACCEPT
ebtables -t filter --atomic-file /tmp/ferm.1 -A INPUT --source Multicast --destination Broadcast -j DROP
ebtables -t filter --atomic-file /tmp/ferm.1 --atomic-commit
ebtables -t nat --atomic-file /tmp/ferm.1 --atomic-commit
ebtables -t broute --atomic-file /tmp/ferm.1 --atomic-commit
|
